一句话:提出面向网络应用的高吞吐模糊测试系统,缓解有状态协议实现吞吐低、测试脚手架复杂的问题。
模糊测试近年来受益于算力提升与算法进展,已在生产软件中发现大量关键缺陷与漏洞,但并非所有应用都能被高效模糊测试。本文聚焦有状态应用,特别是网络协议实现:它们受限于模糊测试吞吐量低,且常需开发复杂的模糊测试脚手架,包括自定义时间延迟和清理脚本。作者提出 SnapFuzz,一个面向网络应用的高吞吐模糊测试系统。摘要未给出具体方法机制与实验数据,因此无法从现有信息确认其实现细节和量化结果;其目标是在保持对网络应用有效测试的同时提升吞吐并降低脚手架复杂度。
In recent years, fuzz testing has benefited from increased computational power and important algorithmic advances, leading to systems that have discovered many critical bugs and vulnerabilities in production software. Despite these successes, not all applications can be fuzzed efficiently. In particular, stateful applications such as network protocol implementations are constrained by a low fuzzing throughput and the need to develop complex fuzzing harnesses that involve custom time delays and clean-up scripts.